Cross site scripting

2023-07-1101:15:00

PRIOn knowledge base

www.prio-n.com

cross-site scripting

issabel pbx

vulnerability

crafted payload

web scripts

0.001 Low

EPSS

Percentile

23.1%

JSON

A stored cross-site scripting (XSS) vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Group and Description parameters.

CPENameOperatorVersion
pbxeq4.0.0-6

CPE	Name	Operator	Version
	pbx	eq	4.0.0-6

References

github.com/sahiloj/CVE-2023-37191/blob/main/README.md

reference3.example.com/index.php?menu=faxnew

0.001 Low

EPSS

Percentile

23.1%

JSON

Related for PRION:CVE-2023-37191